CVE-2026-82004 is an OS Command Injection vulnerability in Adobe Campaign Classic caused by improper neutralization of special elements in OS commands. This flaw enables remote attackers to execute arbitrary code in the context of the current user without requiring any user interaction. The vulnerability has a CVSS 3.1 base score of 10.0, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability. No remediation or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation can lead to arbitrary code execution with the privileges of the Adobe Campaign Classic process, potentially allowing full system compromise including data theft, modification, or service disruption. The vulnerability does not require user interaction and can be exploited remotely, increasing the risk and impact severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to Adobe Campaign Classic instances and monitor for suspicious activity related to command execution. Follow Adobe's official channels for updates on patches or mitigations.